{"id":"CVE-2013-2231","aliases":["EUVD-2013-2183","GHSA-2v34-6f5w-w54r","MGASA-2013-0235","RHSA-2013:1100","RHSA-2013:1101"],"status":"published","title":"Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise...","description":"Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00448,"percentile":0.39221,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2013-07-26T11:54:55Z","modified":"2026-06-29T10:05:41Z","fixes":[{"ecosystem":"Mageia:3","package":"qemu","fixed_in":["1.2.0-8.2.mga3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-guest-agent","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-img","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-kvm","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-kvm-debuginfo","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-kvm-tools","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-guest-agent-win32","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-guest-agent","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-img","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-kvm","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-kvm-debuginfo","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-kvm-tools","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-guest-agent-win32","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-guest-agent","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-img","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-kvm","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-kvm-debuginfo","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-kvm-tools","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-guest-agent-win32","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-guest-agent","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-img","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-kvm","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-kvm-debuginfo","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-kvm-tools","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-guest-agent-win32","fixed_in":["2:0.12.1.2-2.355.el6_4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras:6","package":"virtio-win","fixed_in":["0:1.6.5-6.el6_4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-8.2.mga3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"qemu-guest-agent-win32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"qemu-guest-agent-win32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"qemu-guest-agent-win32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"qemu-guest-agent-win32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:0.12.1.2-2.355.el6_4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"virtio-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.5-6.el6_4"}]}]}],"products":[{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop_supplementary"},{"vendor":"redhat","product":"enterprise_linux_server_supplementary"},{"vendor":"redhat","product":"enterprise_linux_workstation_supplementary"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-1101.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1100.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=980757","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2231","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1100","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1101","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2231","tags":["report"]},{"url":"https://github.com/advisories/GHSA-2v34-6f5w-w54r"},{"url":"https://advisories.mageia.org/MGASA-2013-0235.html","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-1100.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10829","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1100.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2231","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1101.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-2231","description":"Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.","status":"published","published":"2013-10-01T17:00:00Z","modified":"2024-08-06T15:27:41.112Z","updated_at":"2026-11-02T14:34:56.530545Z"}],"euvd":[{"id":"EUVD-2013-2183","description":"Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.","status":"published","published":"2013-10-01T17:00:00Z","modified":"2024-08-06T15:27:41Z","updated_at":"2026-11-03T01:56:39.164386Z"}],"ghsa":[{"id":"GHSA-2v34-6f5w-w54r","title":"Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise...","description":"Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.","status":"published","published":"2022-05-14T01:08:26Z","modified":"2023-02-10T05:06:45Z","updated_at":"2026-11-02T14:54:02.847747Z"}],"nvd":[{"id":"CVE-2013-2231","description":"Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.","status":"published","published":"2013-10-01T17:55:03.413Z","modified":"2026-06-16T23:52:59.107Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:38.715467Z"}],"osv":[{"id":"MGASA-2013-0235","title":"Updated qemu package fixes CVE-2013-2231","description":"Updated qemu packages fix security vulnerability:\n\nAn unquoted search path flaw was found in the way the QEMU Guest Agent\nservice installation was performed on Windows. Depending on the permissions\nof the directories in the unquoted search path, a local, unprivileged user\ncould use this flaw to have a binary of their choosing executed with SYSTEM\nprivileges (CVE-2013-2231).\n","status":"published","published":"2013-07-26T11:54:55Z","modified":"2026-04-16T06:23:53.674675475Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"RHSA-2013:1100","title":"Red Hat Security Advisory: qemu-kvm security update","status":"published","published":"2024-09-13T07:37:20Z","modified":"2026-06-29T10:05:41Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:1101","title":"Red Hat Security Advisory: virtio-win security update","status":"published","published":"2024-09-13T07:37:25Z","modified":"2026-06-29T10:05:41Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}